Web3 Hacks in 2022

2022 incident records, sorted by known loss. The strongest mapped pattern is Access Control (81 rows); the largest tracked chain bucket is Ethereum ($2.1B).

Open full database

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
401 FPR $29K bsc Access Control Attacks Details
402 ProjectX $28K — Rugpull Details Source
403 Web3Memes $28K — Rugpull Details Source
404 QWCF $27K — Rugpull Details Source
405 Space Godzilla $26K bsc Flash Loan Attacks Details Source
406 SCAT $26K — Rugpull Details Source
407 Saxon James Musk $26K — Rugpull Details Source
408 PDR $25K — Rugpull Details Source
409 Verify $25K — Rugpull Details
410 PlantWorld $24K — Flash Loan Attacks Details Source
411 DOGETAMA $22K — Rugpull Details
412 Fortunas Finance $22K — Other Details Source
413 Jaypeggerz $18K ethereum Flash Loan Attacks Details Source
414 BlackGold $18K — Other Details Source
415 Peace doge X $18K — Rugpull Details Source
416 BGLD $18K bsc Oracle Manipulation & Price Manipulation Details
417 SpiritSwap $18K fantom Phishing Attacks Details Source
418 Neoteric Finance $17K — Rugpull Details Source
419 UEarnPool $16K bsc Reward Logic Flaw Details
420 ArcadeEarn $15K — Rugpull Details
421 Bored Ape Europe Club $14K — Rugpull Details
422 ROBOT SHIB $14K — Rugpull Details Source
423 Convex Finance $14K ethereum Other / DNS Hijack Details Source
424 Numbers Protocol $14K ethereum Other / Bridge Logic Flaw Details Source
425 AUR Protocol $13K bsc Access Control Attacks Details
426 sDAO $13K bsc Unknown Details
427 Whale Loans $12K — Other Details Source
428 GMT $12K — Rugpull Details
429 Gooniez Gang $10K — Other Details Source
430 Health $9K — Other Details Source
431 BabyDAO $8K — Rugpull Details Source
432 SEAMAN $7K bsc Unknown Details
433 Polynomial Protocol $7K optimism Other / Missing Input Validation Details Source
434 FlippazOne $7K — Access Control Attacks Details
435 APC $6K bsc Oracle Manipulation & Price Manipulation Details
436 MBC & ZZSH $6K bsc Access Control Attacks Details
437 Xave Finance — ethereum Other / Malicious Proposal Details Source
438 3Commas — multi chain Exchange API credential exposure Details Source
439 Golden Moon — binance Honeypot Details Source
440 Gemini — — Phishing Attacks Details Source
441 TIFIToken — bsc Oracle Manipulation & Price Manipulation Details
442 Lodestar V0 — arbitrum Flash Loan Attacks Details Source
443 NOVAToken — bsc Admin Drain Details
444 BBOX — bsc Oracle Manipulation & Price Manipulation Details
445 RFB — bsc Missing Input Validation Details
446 Ratio Finance — solana Access Control Attacks Details Source
447 Overnight Finance — avalanche Unknown Details
448 Fairmoon — binance Honeypot Details Source
449 GeoDB — — Other Details Source
450 Bad Guys by RPF — ethereum Incorrect Share Accounting Details
451 Acala — acala Infinite Mint Details Source
452 XSTABLE Protocol — ethereum Unknown Details
453 Impermax — ethereum, polygon Access Control Attacks Details Source
454 Vauld — — Other Details Source
455 GoldenEsse — binance Honeypot Details Source
456 Wintermute — optimism Access Control Attacks Details Source
457 Transaction Control Protocol — ethereum Honeypot Details Source
458 Drift Trade — solana Profit withdrawal accounting failure Details Source
459 Ebuy Finance — binance Honeypot Details Source
460 TreasureDAO — — Other Details Source
461 StaticFire — binance Honeypot Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists. Largest crypto hacks Compare this year against the highest-loss incidents in the database.